Scammers use Caller ID Spoofing to display the bank's legitimate number on the mobile screen, thus creating a false sense of trust. Their goal is to make the victim believe their account is in danger and that urgent action is required.
With a convincing speech, criminals explain that they have detected a suspicious operation and propose as a solution to transfer the money to a "secure account" or validate operations to block alleged fraud. In reality, this account belongs to the cybercriminals, and the victim ends up authorizing the transfers themselves.
This technique is particularly dangerous because the phone number appears authentic, even if the bank was saved in the mobile's contacts. Scammers also request SMS codes that the bank sends to verify operations, using them to authorize fraudulent transfers.
Banking entities insist that they will never request passwords, verification codes, or ask to transfer money to other accounts over the phone. If in doubt, they recommend hanging up and contacting the bank directly through official channels.
To avoid falling into the trap, the Mossos d'Esquadra and banks advise distrusting unexpected calls, not making transfers under telephone pressure, never providing SMS codes or passwords, and verifying any urgent situation by contacting the entity directly.
If you become a victim of this scam, it is crucial to contact the bank immediately to block the account or cards, change your online banking access codes, gather evidence, and file a report with the Mossos d'Esquadra.
